Dynamic permissions callbacks classes must implement an interface

Created on 24 September 2015, over 9 years ago

Updated 2 June 2025, 10 days ago

Working on #2571235: [regression] Roles should depend on objects that are building the granted permissions → I realized that callbacks that provides permissions are not necessary part of a class implementing a dedicated interface. If we want to provide also dependencies along with permissions (see #2571235: [regression] Roles should depend on objects that are building the granted permissions → ) it would be nice to create some laws on how dynamic permissions are provided.

Add a new interface for classes providing dynamic permissions:

interface DynamicPermissionsInterface {
  public function getPermissions();
  public function calculateDependencies();
}

In *.permissions.yml specify the class, instead of the callback.
Rework \Drupal\user\PermissionHandler::buildPermissionsYaml() to enforce the usage of classes implementing the new interface and use the ->getPermissions() method instead of the previously callback.
Provide dependencies and handle them to keep the system integrity.

New interface DynamicPermissionsInterface.

✨ Feature request

Status

Postponed: needs info

Version

11.0 🔥

Component

user system

Created by

🇷🇴Romania claudiu.cristea Arad 🇷🇴

Live updates comments and jobs are added and updated live.

stale-issue-cleanup
To track issues in the developing policy for closing stale issues, [Policy, no patch] closing older issues

Incomplete comments

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024